A31003-D3000-M100-02-76A9, 11-2013
OpenScape Desk Phone IP V3R3, Phone Administration, Administrator Documentation 83
Administration
Security
Administration via Local Phone
Related To pics
Related Topics
•
Speech Encryption
3.4.1.3 SDES Configuration
When SDES is selected as SRTP negotiation method (see Security - General
Configuration), it can be configured further.
The SDES status parameter enables or disables SDES, just like SRTP type in
System > Security > System (see Security - General Configuration). When SDES
is disabled, MIKEY will be used.
The SDP negotiation parameter specifies whether the use of SRTP will be forced
by the phone. The following choices are available:
• RTP + SRTP - Both non-encrypted (non-secure) and encrypted (secure)
media connections are offered. Non-encrypted connections are preferred
over encrypted connections, i.e. the phone uses the non-encrypted RTP
connection if the remote party accepts it and only switches to SRTP if RTP is
not accepted.
• With SRTP only, only an encrypted (secure) media connection is allowed; if
the remote party should not support SRTP, no connection will be established.
• With SRTP + RTP, the phone will try to establish an SRTP connection, but fall
back to RTP if this should fail. This is the recommended option.
With SHA1-80 ranking and SHA1-32 ranking, the ranking for each crypto-suite
for negotiation is defined. Additionally, each crypto-suite can be enabled or
disabled.
|
--- Admin
|--- System
|--- Security
|--- System
|--- Server certificate
|--- Use secure calls
|--- SRTP type
|--- Use SRTCP
